ENERCON E-82 E4 - Safety System; Safety Equipment; Sensor System

5 Safety system
The E-82 E4 comes with a large number of safety features whose purpose is to permanently keep
the WEC inside a safe operating range. In addition to components that ensure safe stopping of the
wind energy converter, these include a complex sensor system. It continuously captures all rele‐
vant operating states of the wind energy converter and makes the relevant information available
through the ENERCON SCADA remote monitoring system.
If any safety-relevant operating parameters are out of the permitted range, the WEC will continue
running at limited power or it will stop.
5.1 Safety equipment
Emergency stop button
In an ENERCON wind energy converter there are emergency stop buttons next to the tower door,
on the control cabinet in the tower base, on the nacelle control cabinet and, if required, on further
levels of the E-module. Actuating an emergency stop button activates the rotor brake. Emergency
pitching of the rotor blades takes place.
The following are still supplied with power:
■ Rotor brake
■ Beacon system components
■ Lighting
■ Sockets
Main switch
In an ENERCON wind energy converter, main switches are installed on the control cabinet and the
nacelle control cabinet. When actuated, they de-energise virtually the entire wind energy converter.
The following are still supplied with power:
■ Beacon system components
■ Service hoist
■ Sockets
■ Lighting
■ Medium-voltage area
5.2
Sensor system
There is a large number of sensors that continuously monitor the current status of the wind energy
converter and the relevant ambient parameters (e.g. rotor speed, temperature, blade load, etc.).
The control system analyses the signals and regulates the wind energy converter such that the
wind energy available at any given time is always optimally exploited and operating safety is ensur‐
ed at the same time.
Redundant sensors
In order to be able to check plausibility by comparing the reported values, more sensors than nec‐
essary are installed for some operating states (e.g. for measuring the generator temperature). De‐
fective sensors are reliably detected and can be replaced by activation of a spare sensor. In this
way, the wind energy converter can safely continue its operation without the need for replacement
of major components.
Safety system
D0376616-2 / DA 9 of 21